On 10/10/2017 11:24 AM, Gabe Alford wrote:
I have yet to see accreditors ask for SV- rule tags. I guess it happens in some circles, but the RHEL identifiers were the ones that I have always seen referenced. Of course when RMF came into the picture, it was all about NIST mappings and very little about STIG identifiers.

eMASS uses SV tags for mapping.  It's the only way to link an issue in an (eMASS) POA&M directly back to the STIG rule.



-- 
Paul Arnold, CISSP
Cole Engineering Services, Inc.